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Title 

taaaaijasil rasas' to a cosrfcasafe sos'vie© 

5 Field of the invention 

The present invention is related to online access to 
content services. More specifically, a method and system 
for controlled access to content services where a terminal 
user can be allowed or refused access to a content service 
10 and the use thereof are disclosed. 

Background of the invention 

A solution for controlled online access from a 
terminal user to a content service is already known where 

15 the terminal user has to provide a username and password in 
order to get access to the content service. When the 
username is not known or when the password is invalid the 
user will be denied access. A disadvantage of this solution 
is that a username and password .need to be registered* This 

20 implies that the terminal user and the content provider 
need to perform a registration step, which is time 
consuming and annoying. 

For chargeable content services the terminal user can 
35 also be denied access based on a billing account for that 
user. Known solutions based on this principle have a 
disadvantage in that, when the billing account does not 
exist or when the billing account has insufficient balance, 
the terminal user has to perform an additional step to 
30 create a new billing account or to update its balance . 

Again this additional step is time consuming and annoying. 
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Another solution for controlled online access to 
chargeable content services is known from WO 97/01920. This 
invention is based on the idea that an access from a user's 
data terminal to a chargeable service is offered to the 
5 user for the time period during which a connection exists 
from the user's telephone to a predetermined telephone 
number. A disadvantage of this solution is that the user 
needs two devices, namely a data terminal and a telephone, 
to be allowed access to a content service. Another 
10 disadvantage of this solution is that two connections are 
needed at the same time, namely the telephone connection to 
allow access and the data connection to use the content 
service. There are numerous situations where the user is 
not able to have two connections at the same time. An 
IS example of this is a user having only one connection to a 
POTS (Plain Old Telephony System) and this one connection 
is used for both telephony and Internet access, but not at 
the same time. Another example is a user in a mobile 
telecommunications network, e.g. a GSM/GPRS network, where 
SO the mobile terminal can make a telephone connection via GSM 
and a data connection via GPRS, but not at the same time 
because of limitations of the user's terminal. 



Yet another solution for controlled online access to 
25 chargeable content services is known from 

http : //www . audiotext . nl/newsite/betaalgateway_imode . htm. In 
this solution activating a number, i.e. a second code in 
the present invention, by a customer on an i-mode site, 
activates a payment gateway, called a first system in the 
present invention. In a dialog with a voice response 
application, i.e. a second system in the present invention, 
the customer receives an access code. This access code has 
to be entered on the i-mode site. Next the gateway allows 



30 
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access to the chargeable content ■ A disadvantage of this 
solution is that the customer receives the access code by 
listening to the response of the voice response system- 
Often codes transmitted in this way are not caught 
§ correctly* In a next step the customer has to enter the 

received code on the i-mode site- This step is susceptible 
to typing errors. The whole procedure of receiving and 
entering the access code is time consuming and can be 
annoying to the customer* 

10 

Problem definition 

Thus the prior art fails to disclose a solution to get 
access from a terminal user to a content service without 
having to perform additional time-consuming and annoying 

15 steps or without having to use two separate devices or 

having to make two simultaneous connections. A solution for 
controlled online access from a terminal user to a content 
service, wherein the above mentioned additional steps are 
not necessary, is required for applications such as user- 

20 friendly chargeable content provisioning to terminal users 
in a mobile telecommunications network like GSM/GPRS » 

Aim of the invention 

The aim of the invention is to provide a solution to 
25 enable controlled online access from a terminal user to a 
content service wherein no time-consuming registration 
steps, which are also annoying to the customer, or billing 
steps have to be performed, only one terminal is needed by 
the user and only one connection can be active at the time, 

30 

Summary of the invention 

The present invention provides a solution to enable 
controlled online access from a terminal user to a content 
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service wherein no time-consuming registration steps, which 
are also annoying to the customer, or billing steps have to 
be performed, only one terminal is needed by the user and 
only one connection needs to be active at the time. 

5 

In the present invention controlled online access from 
a terminal user to a content service can be provided via a 
telecommunications system, the telecommunications system 
comprising a network, at least one terminal being connected 
10 to the network, the terminal comprising a display for 

displaying content services. The network can comprise a 
packet-switched domain and a circuit-switcn^^k^in. ^ 



20 



30 



A method is claimed #©r~ use ih a first system, the" 
15 first system being connected to a second system, but it 
also being possible that the. first system and the second 
system are one and the same. The method comprises the 
following steps: 

a) receiving in the first system a reguest from the 

terminal for access to a content service, said reguest 
being sent from the terminal to the first system using 
the network, possibly using the packet-switched 
domain, said request comprising a first code for 
identifying the terminal user and/or terminal, 
25 b) allowing or refusing online access from said terminal 
to said content service, if the first system is 
connected to a means for storing billing data of 
terminal users then this decision can be based on the 
terminal user's billing data, 
followed by, in case in step b online access is refused, 
c) providing the terminal with information to set up a 
connection to the second system, said information 
comprising a second code identifying said request. 
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said information being sent from the first system to 
the terminal using the network, possibly using the 
packet-switched domain, 

d) r ceiving in the second system said second code, the 
second code being sent from the terminal to the second 
system using the network, possibly using the circuit- 
switched domain/ 

e) allowing online access from said terminal to said 
content service, possibly on a next access request. 



10 



In case of refusal, the method can also comprise the 
following, steps: 

f ) storing said first code and said second code with the 
terminal user's billing data, 
15 g) on receiving said second code in the second system, 
updating the terminal user's billing data referenced by 
said second code, possibly by adding a sum to the terminal . 
user's billing data, wherein said sum can correspond with a 
tariff of using the second network . 

as 

If prior to step f the billing data of the terminal 
user is absent, it can be created first. 

In case of allowance the method can comprise one of 
25 the following steps: 1) retrieving in the first system the 
requested content service, forwarding said requested 
content service to the terminal or 2) connecting the 
terminal to said content service. 



3D 



Note that the steps in the above-described methods of 
the invention do not have to be performed in the given 
order* 
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The invention also relates to a system arranged to 
perform the above-mentioned methods of the invention. 

Brief description of the drawings 
5 The invention will be explained in greater detail by 

reference to exemplary embodiments shown in the drawings, 
in which: 

Fig.l shows a block diagram according to an exemplary 
embodiment of the invention; 
10 Fig. 2 shows a block diagram of an alternative 

exemplary embodiment of the invention; 

Fig. 3 3hows a block diagram of another alternative 
exemplary embodiment of the invention; 

Fig. 4 shows a flow diagram. according to an exemplary 
15 embodiment of the invention 

Fig. 5 shows a flow diagram of an alternative exemplary 
embodiment of the invention; 

Fig. 6 shows a flow diagram of another alternative 
exemplary embodiment of the invention. 

20 

Detailed description of the invention 

For the purpose of teaching of the invention, 
preferred embodiments of the method and system of the 
invention are described in the sequel. It will be apparent 
25 to the person skilled in the art that other alternative and 
equivalent embodiments of the invention can be conceived 
and reduced to practice without departing from the true 
spirit of the invention, the scope of the invention being 
limited only by the appended claims . 



30 



Fig.l and Fig. 2 show block diagrams according to 
exemplary embodiments of the invention. Fig. 4 and Fig. 5 
show flow diagrams of exemplary embodiments of the 
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invention. Fig.l and Fig -4 will be referred to in the 
following description. 

A terminal user (1) wants to have access to. a content 
service (2) via a telecommunications system (3) . The 
S telecommunications system (3) comprises a network (4) and a 
terminal (5) . The terminal (5) is used by terminal user 
(1) . To get access to a content service (2) the terminal 
user (1) sends a request to a first system (6); this 
request comprises a first code identifying the terminal (5) 
10 or terminal user (1) . The first system (6) receives the 

request (a) . The first system (6) decides (b) to allow (b2) 
or refuse (bl) access to the content service (2) . In case 
of refusal, the terminal (5) will be provided (c) with 
information to set up a connection to a second system (7) „ 
as This information comprises a second code identifying the 
request from the terminal user (1) , The terminal user (1) 
receives the information on the terminal (S) and sends the 
second code to the second system (7) by using the provided 
information ♦ The second system (7) receives (d) the second 
20 code. The terminal (5) will be allowed access (el) (b) (b2) 

now. A means (8) for storing billing data of terminal users 
can be connected to the first system (6). 

Fig. 5 shows a flow diagram of an alternative exemplary 
embodiment of the invention, where the terminal (5) will be 
25 allowed access (e2) on a next access request (a) . 

Fig .2 shows a block diagram of an alternative 
exemplary embodiment of the invention. Here the network (2) 
comprises a packet-switched domain (4a) and a circuit- 
switched domain (4b) . The terminal 5 can be connected to 
30 the first system (6) via the packet-switched domain (4a) 
and to the second system (7) via the circuit-switched 
domain (4b) . 
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Fig. 6 shows a flow diagram of another alternative 
exemplary embodiment of the invention. Extra steps 
(h) (f ) (g) can be added when the first system (6) is 
connected to a means (8) for storing billing data of 
5 terminal users. 

Fig. 3 shows a block diagram of another alternative 
exemplary embodiment of the invention. The terminal (5) cai 
be connected to the content service (2) via the first 
system (6) . 

10 

A solution to enable controlled online access from a 
terminal user (1) to a content service (2) based on Fig. 3 
and Fig. 6 will be described as an example in more detail. 
In this example terminal user (1) is a mobile 
15 customer, terminal (5) is a GSM/GPRS mobile phone, the 
packet-switched domain (4a) is a GPRS network and the 
circuit-switched domain (4b) is a GSM network. The mobile 
phone (5) is able to display internet-like content. In this 
example a content provider offers chargeable content (2) . 
20 Access to the chargeable content (2) is only possible when 
connecting to the content service (2) via an access system 
(6) . When the mobile customer (1) tries to connect to the 
chargeable content service (2) directly., the mobile 
customer (1) will be redirected to the access system (6) . 
25 In other words, the mobile customer (1) will get a message 
on the display of the mobile phone (5) that it is 
impossible to connect to the content service (2) directly, 
and will be provided a new link which should be used to 
connect to the content service (2). This link can be used 
30 as a first request (a) as mentioned in Fig. 6. 

Now the mobile customer (1) can make a valid request 
(a) to access the chargeable content service (2) . Together 
with the request a first code for identification is sent to 
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the access system (6) ♦ This identification can be used to 
identify the mobile customer. Examples of this type of 
identification are Mobile Subscriber ISDN number (MSISDN) r 
International Mobile Subscriber Identification (IMSI) and 
S ICC Identification (ICCID) . These identifications are 

stored on the SIM card of the mobile customer (1) , which is 
inserted into the mobile phone (5) . Another example of a 
way to identify the mobile customer is to use a randomly 
created code, which is generated in the access system (6) 

10 and sent to the mobile phone (5) prior to the valid request 
(a) to access the chargeable content service (2) as 
described above. A randomly generated code can be used to 
identify the customer during the current session, i.e. as 
long as the mobile phone (5) is connected to the access 

IS system {6) - Instead of identifying the mobile customer it 
is also possible to identify the mobile phone by the 
International Mobile Equipment Identity (IMBI) that is 
stored in the mobile phone (5) 

To have the mobile terminal <5) send the 

20 identification to the access system (6) the compact HTML 
(cHTML) language can be used- A link on the cHTML page to 
request access to a chargeable content service (2) 
including identification can look like this; 

<a href =" link to request content service" utn> ^" 
25 Adding the utn tag enables transmitting the tMEI+ICCID in 
the HTTP header from the mobile phone (5) to the access 
system (6) . The HTTP header is sent from the mobile 
terminal (5) to the access system (6) via the GPRS domain 
(4a) . 

30 Let's assume that access to the content service (2) is 

refused (bl) . This refusal can be based on billing data of 
the mobile customer (8), e,g. there is no balance, A second 
code will be generated at the access system (6) . This 
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second code will be used to identify the requested content 
service (2) - Together with th first code identifying the 
mobile customer the second code identifying the requ sted 
service is stored <f) with the mobile customer's billing 
data (8), e.g., this can be done by using the Lightweight 
Directory Access Protocol (LDAP) , If it is the first time 
that the mobile customer (1) requests access to a 



chargeable content service (2) via the access system (6) 
the mobile customer's billing data (8) can be absent. In 
10 this case the mobile customer's billing data (8) can be 
created first (h) . 

The access system (6) sends (c) a new cHTML page to 
the mobile phone (5) via the GPRS domain (4a). On this 
cHTML page there can for example be information about the 
15 costs of the requested content service and a clickable 

button to connect to the second system (7), in this example 
a Voice Response System (VRS) capable of receiving Dual 
Tone Multi-Frequency (DTMF) tones, and send the second 
code. The link to the Voice Response System can look like 
20 this: 

<a href« ,f NoDTMFSupport .html" cti="123456789/12345"> ' I 
If the mobile phone (5) doesn f t support sending DTMF a page 
NoDTMFSupport.html will be requested, resulting in not 
being able to receive the requested content service (2) . if 

25 DTMF is supported the telephone number 123456789 will be 
called. This telephone number corresponds with the Voice 
Response System (7). when a connection from the mobile 
phone (5) to the Voice Response System (7) via the GSM / 
domain (4b) is made f the second code identifying the 

30 requested content service (in this example the second code 
equals 12345) is sent by using DTMF. 

When the second code is received (d) the mobile 
customer's billing data (8) containing the stored (f) 
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second code is looked up, e.g. by using LDAP, and the 
mobile customer's billing data (8) is updated (g) . This 
updating (g) can for example mean that a counter indicating 
a number of allowed accesses is increased, or a specific 
5 amount of time that the mobile customer (1) is allowed to 
use the content service (2) is. added, or that a sum 
corresponding to a tariff of calling the Voice Response 
System is added . 

On a next request from the mobile customer (1) to 
10 access the content service (2) access will be allowed (b2) 
because the mobile user's billing data (8) indicates that, 
e.g., there is enough balance. 

Allowing access (b2) to the requested content service 
(2) can be achieved by using a proxy server, which can be 
15 part of the access system (6), The proxy server retrieves 
the requested content service (2) and forwards it to the 
mobile phone (5). When the mobile customer's billing data 
(8) indicates that access is not allowed anymore, e.g. 
because a time limit is reached, the proxy server can block 
20 access to the content service (2) and start the refusing 
access step (bl) of the invention. 

Allowing access (b2) can. also be achieved by using a 
firewall, which can be part of the access system (6} . In 
this case if the mobile customer (1) is allowed access (b2) 
25 a firewall rule should be set to allow connection to the 
content service (2) . In case of refusing access (bl) the 
firewall rule should be set to refuse connection to the 
content service (2), resulting in a "page not found" error 
on the mobile phone (5) . 



30 



The example above clearly shows that the aim of the 
invention is reached. The access system (6) enables 
controlled online access from the mobile customer (1) to a 
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content service (2). No time consuming and annoying 
registration or registration steps have to be performed, 
instead the mobile customer (1) can access the requested 
content service (2) just by clicking the appropriate links, 
first to pay and next to get access. Both steps are 
possible using just one mobile phone, only one connection 
is active at the time because the GPRS connection and GSM 
connection are made sequentially. 



10 
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Claims 

1. Method for providing controlled online access from a 
terminal user (1) to a content service (2) via a 
telecommunications system (3) 9 the telecommunications 
5 system (3) comprising a network (4), at least one terminal 

(5) being connected to the network (4), the terminal (5) 
comprising a display for displaying content services (2), 
said method for use in a first system (6) , the first system 

(6) being connected to a second system (7), 
10 the method comprising the following steps: 

a) receiving (a) in the first system (6) a request from 
the terminal (5) for access to a content service (2), 
said request being sent from the terminal (5) to the 
first system (6) using the network (4), said request 

15 comprising a first code for identifying the terminal 

user (1) and/or terminal (5), 

b) allowing <b2) or refusing (bl) online access from said 
terminal (5) to said content service (2), 

in case of refusal (bl), 

20 c) providing (c) the terminal (5) with information to set 
up a connection to the second system (7) r said 
information comprising a second code identifying said 
request, said information being sent from the first 
system (6) to the terminal (5) using the network (4), 

25 d) receiving (d) in the second system (7) said second 

code, the second code being sent from the terminal (5) 
to the second system (7) using the network (4), 
e) allowing (el;b;b2) online access from said terminal 
(5) to said content service (2) . 

30 

2, Method according to claim 1 wherein step e takes place 
on a next access request (e2) * 
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3. Method according to claim. 1 or 2 wherein said first 
system (6) and said second system (7) are the same. 

4. Method according to any of the claims 1-3 wherein said 
5 network (4) comprises a packet switched domain (4a) and a 

circuit switched domain (4b) . 

5. Method according to claim 4 wherein said request is 
sent from the terminal (5) to the first system (6) using 

10 the packet switched domain (4a) . 

6. Method according to claim 4 or 5 wherein said 
information is sent from the first system (6) to the 
terminal (5) using the packet switched domain (4a) . 



15 



7. Method according to any of the claims 4-6 wherein said 
second code is sent from.the terminal (5) to the second 
system (7) using the circuit switched domain (4b). 

20 8. Method according to any of the claims 1-7 wherein said 
first system (6) is connected to a means (8) for storing 
billing data of terminal users (1). 



25 



9- Method according to claim 8 wherein said means (8) for 
storing billing data of terminal users is part of the first 
system (6) , 



10. Method according to claim 8 wherein said means (8) for 
storing billing data of terminal users is part of the 

30 second system (7) . 

11. Method according to any of the claims 8-10 wherein 
step b is based on the terminal user's billing data. 
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12. Method according to claim 11 wherein the method 
further comprises the following steps 0 in case of refusal 
(bl) f 

5 i ) storing (f) said first code and said second code with 
the terminal user's billing data, 
g) on receiving (d) said second code in the second system 
(7), updating (g) the terminal user's billing data 
referenced by said second code, 

10 

13, Method according to claim 12 wherein step g is 
accomplished by adding a sum to the terminal user's billing 
data- 

1S 14* Method according to claim 13 wherein said sum 

corresponds with a tariff of using the second system {7)« 

15, Method according to any of the claims 12-14 wherein, 
if said terminal user's billing data is absent, the 

20 terminal user's billing data is created (h) first * 

16, Method according to any of the claims 1-15 wherein the 
method further comprises the following steps s in case of 
allowance (b2) / retrieving in the first system (6) the 

25 requested content service, and forwarding said requested 
content service (2) to the terminal (5) ♦ 

17- Method according to any of the claims 1-15 wherein the 
method further comprises the following step: in case of 
30 allowance (b2), connecting the terminal (5) to said content 
service (2) . 
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18. A system arranged to perform the methods according to 
any of the preceding claims. 
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Abstract 

The present invention is related to online access to 
content services. More specifically, a method and system 
for controlled access to content services (2) where a 
5 terminal user (1) can be allowed (b2) or refused (bl) 
access to a content service (2) and the use thereof are 
disclosed. The invention provides a solution to enable 
controlled online access from a terminal user (1) to a 
content service (2) wherein no time-consuming registration 
10 steps, which are also annoying to the customer , or billing 
steps have to be performed, only one terminal (5) is needed 
by the user (1) and only one connection needs to be active 
at the time. 
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